Desde hace unas semanas, he estado recibiendo varios mensajes de error falsos, mi disco se ha estado llenando de archivos pos****.tmp que no puedo borrar, y la computadora se me pone lenta.
Tengo AntiVir como antivirus, pero no me detecta nada. He tratado con ComboFix, CCleaner, VunduFix y Spyware Doctor. Con Spyware Doctor no puedo hacer nada, pues nunca termina de cargarse... VunduFix reconoció el virus como Vundu, pero no pudo eliminarlo.

Otro problema que tengo desde hace tiempo es que de la nada se me abren paginas que dicen CiD, pero ese no molesta tanto :P

Aqui adjunto el log de HijackThis:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:58, on 2008-02-12
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Boot mode: Normal

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\spoolsv.exe
D:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
D:\WINDOWS\Explorer.EXE
D:\Program Files\AntiVir PersonalEdition Classic\sched.exe
D:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
D:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\System32\hkcmd.exe
D:\WINDOWS\System32\pctspk.exe
D:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
D:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
D:\Program Files\ScanSoft\OmniPageSE\opware32.exe
D:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
D:\Program Files\Common Files\Real\Update_OB\realsched.exe
D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
D:\WINDOWS\System32\ctfmon.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\wuauclt.exe
D:\Program Files\Internet Explorer\iexplore.exe
D:\Program Files\Zango\bin\10.1.181.0\Srv.exe
D:\Documents and Settings\Manuel\Local Settings\Temporary Internet Files\Content.IE5\Z2GNJXKD\HiJackThis[1].exe

O2 - BHO: HelperObject Class - {00C6482D-C502-44C8-8409-FCE54AD9C208} - D:\Program Files\TechSmith\SnagIt 7\SnagItBHO.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {259F616C-A300-44F5-B04A-ED001A26C85C} - (no file)
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - D:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: {12425b2e-a624-c94b-8124-20a0e6d81487} - {78418d6e-0a02-4218-b49c-426ae2b52421} - D:\WINDOWS\System32\amooqitl.dll (file missing)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - D:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {A95B2816-1D7E-4561-A202-68C0DE02353A} - D:\WINDOWS\system32\qzjyrdyu.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - d:\program files\google\googletoolbar3.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - D:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Zango /fleok=1D8A83A5C2E5107A9EAB6A2A1FBB39BFE4976E26CAED A120180A196D6093 - {E1BACF55-35E1-4E47-9247-2D48660E5545} - D:\Program Files\Zango\bin\10.1.181.0\HostIE.dll
O3 - Toolbar: DAP Bar - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - D:\Program Files\DAP\DAPIEBar.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - D:\Program Files\TechSmith\SnagIt 7\SnagItIEAddin.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - D:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program files\google\googletoolbar3.dll
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - D:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - D:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Zango - {E1BACF55-35E1-4E47-9247-2D48660E5545} - D:\Program Files\Zango\bin\10.1.181.0\HostIE.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] D:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] D:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] D:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [DAEMON Tools-1033] "D:\Program Files\D-Tools\daemon.exe" -lang 1033 -noicon
O4 - HKLM\..\Run: [IMEKRMIG6.1] D:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [MSPY2002] D:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [IgfxTray] D:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] D:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "D:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] D:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "D:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Omnipage] D:\Program Files\ScanSoft\OmniPageSE\opware32.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [avgnt] "D:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [TkBellExe] "D:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKCU\..\Run: [swg] D:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\G oogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Aim6] "D:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp
O4 - HKCU\..\Run: [SpybotSD TeaTimer] D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\System32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [MySpaceIM] D:\Program Files\MySpace\IM\MySpaceIM.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = D:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = D:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: BlueSoleil.lnk = ?
O8 - Extra context menu item: &Download with &DAP - D:\PROGRA~1\DAP\dapextie.htm
O8 - Extra context menu item: &Windows Live Search - res://D:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Abrir en nueva ficha de fondo - res://D:\Program Files\Windows Live Toolbar\Components\es-xl\msntabres.dll.mui/229?3ccb1b1b604347ed8472a82c0d441372
O8 - Extra context menu item: Abrir en nueva ficha en primer plano - res://D:\Program Files\Windows Live Toolbar\Components\es-xl\msntabres.dll.mui/230?3ccb1b1b604347ed8472a82c0d441372
O8 - Extra context menu item: Add to AMV Converter... - D:\Program Files\MP3 Player Utilities 4.18\AMVConverter\grab.html
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: Download &all with DAP - D:\PROGRA~1\DAP\dapextie2.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Investigador - {9455301C-CF6B-11D3-A266-00C04F689C50} - D:\Program Files\Common Files\Microsoft Shared\Encarta Researcher\EROPROJ.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - D:\Program Files\AIM\aim.exe
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - D:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - D:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - D:\WINDOWS\web\related.htm
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - D:\Documents and Settings\Manuel\Start Menu\Programs\IMVU\Run IMVU.lnk
O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/ES-LA/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1172888600968
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O20 - Winlogon Notify: bjeflfpx - D:\WINDOWS\SYSTEM32\bjeflfpx.dll
O20 - Winlogon Notify: eyalcxne - eyalcxne.dll (file missing)
O20 - Winlogon Notify: jkkhggh - jkkhggh.dll (file missing)
O20 - Winlogon Notify: lmniqxnt - D:\WINDOWS\SYSTEM32\lmniqxnt.dll
O20 - Winlogon Notify: qzjyrdyu - D:\WINDOWS\SYSTEM32\qzjyrdyu.dll
O20 - Winlogon Notify: ufzsraqb - ufzsraqb.dll (file missing)
O20 - Winlogon Notify: vnlpmxpx - vnlpmxpx.dll (file missing)
O20 - Winlogon Notify: wgbqrqkp - wgbqrqkp.dll (file missing)
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - D:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - D:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - D:\Program Files\Ares\chatServer.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - D:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: Google Updater Service (gusvc) - Google - D:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

--
End of file - 10537 bytes

Hola, te doy la bienvenida al Foro, sigue estos pasos:

- Descarga y ejecuta la herramienta Ccleaner ( http://www.forospyware.com/t39511.html) y siguiendo los pasos de su manual utiliza las opciones Limpiador y Registro.

- Descarga el Super Antispyware (http://www.infospyware.com/Anti-Spywares.htm) instálalo y actualízalo luego realiza un escaneo en Modo Seguro (http://www.forospyware.com/showpost.php?p=47&postcount=4)

- Descarga la herramienta ComboFix (http://www.forospyware.com/sUBs/ComboFix.exe) y guárdala en tu escritorio.
Haz doble clic en el archivo combofix.exe y sigue los avisos.
Cuando termine este generará un reporte que tendrías que pegar en este mismo mensaje.

Nota* Puede que algunos Antivirus como Panda detecten un falso positivo (http://www.forospyware.com/glossary.php?do=viewglossary&term=20)en ComboFix pero no hay que preocuparse por esto.

Reinicia el sistema y nos cuentas los resultados. junto con un reporte de ComboFix.

Saludos :adios:

Aunque mi cuenta tiene derechos de administrador, el SUPERAntiSpyware me dice que solo puede realizar el escaneo en una cuenta con privilegios de administrador... Incluso trate desde la cuenta "Administrator", y tambien me dice lo mismo :frown:

Obvia ese paso y sigue con lo demás, sobre todo pega tu reporte de ComboFix.

Saludos :adios:

Todo sigue igual :(

ComboFix 08-02-16.2 - Manuel 2004-09-13 14:15:48.2 - NTFSx86 MINIMAL
Running from: D:\Documents and Settings\Manuel\Desktop\ComboFix.exe

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

D:\WINDOWS\system32\qzjyrdyu.dll
D:\WINDOWS\system32\bjeflfpx.dllbox
D:\WINDOWS\system32\lmniqxnt.dllbox
D:\WINDOWS\system32\qzjyrdyu.dll
D:\WINDOWS\system32\qzjyrdyu.dllbox
D:\WINDOWS\system32\windows
.
---- Previous Run -------
.
D:\WINDOWS\system32\jkkhggh.dll
D:\WINDOWS\system32\ssqpq.dll
D:\WINDOWS\system32\ufzsraqb.dll
D:\WINDOWS\system32\vnlpmxpx.dll
D:\WINDOWS\system32\wgbqrqkp.dll
D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat
D:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat
D:\Documents and Settings\All Users\Application Data\storageprotector
D:\Documents and Settings\All Users\Start Menu\Programs\StorageProtector
D:\Documents and Settings\Manuel\Application Data\ShoppingReport
D:\Documents and Settings\Manuel\Application Data\storageprotector
D:\Documents and Settings\Manuel\Desktop\StorageProtector.lnk
D:\Program Files\Common Files\StorageProtector
D:\Program Files\Common Files\StorageProtector\strpmon.exe
D:\Program Files\ShoppingReport
D:\Program Files\ShoppingReport\Bin\2.0.26\ShoppingReport.dll
D:\Program Files\ShoppingReport\Uninst.exe
D:\Program Files\StorageProtector
D:\Program Files\StorageProtector\atl71.dll
D:\Program Files\StorageProtector\License.rtf
D:\Program Files\StorageProtector\mfc71.dll
D:\Program Files\StorageProtector\msvcp71.dll
D:\Program Files\StorageProtector\msvcr71.dll
D:\Program Files\StorageProtector\Readme.rtf
D:\Program Files\StorageProtector\Res\Main.ico
D:\Program Files\StorageProtector\Res\RecycleBin.ico
D:\Program Files\StorageProtector\rm.url
D:\Program Files\StorageProtector\sr.log
D:\Program Files\StorageProtector\swupd.log
D:\Program Files\StorageProtector\SysRep.exe
D:\Program Files\StorageProtector\SysRep.exe.cer
D:\Program Files\StorageProtector\SysRep.exe.Log
D:\Program Files\StorageProtector\SysRep.exe.xml
D:\Program Files\StorageProtector\SysRep.url
D:\Program Files\StorageProtector\transpaid.exe
D:\Program Files\StorageProtector\ucookw.exe
D:\Program Files\StorageProtector\unins000.dat
D:\Program Files\StorageProtector\unins000.exe
D:\Program Files\StorageProtector\urls.ini
D:\WINDOWS\system32\amooqitl.dll
D:\WINDOWS\system32\bjeflfpx.dllbox
D:\WINDOWS\system32\ccnjarvj.ini
D:\WINDOWS\system32\dcmbhnmd.dll
D:\WINDOWS\system32\dwoeapep.dll
D:\WINDOWS\system32\eyalcxne.dll
D:\WINDOWS\system32\eyalcxne.dll . . . . failed to delete
D:\WINDOWS\system32\eyalcxne.dllbox
D:\WINDOWS\system32\ftyogjap.dll
D:\WINDOWS\system32\huxpmieb.dll
D:\WINDOWS\system32\ilumysbu.dll
D:\WINDOWS\system32\jkkhggh.dll
D:\WINDOWS\system32\jvrajncc.dll
D:\WINDOWS\system32\lmniqxnt.dllbox
D:\WINDOWS\system32\mcrh.tmp
D:\WINDOWS\system32\nahjufjw.ini
D:\WINDOWS\system32\orsgyytv.dll
D:\WINDOWS\system32\pepaeowd.ini
D:\WINDOWS\system32\qpqss.ini
D:\WINDOWS\system32\qpqss.ini2
D:\WINDOWS\system32\qtwoftat.dll
D:\WINDOWS\system32\qzjyrdyu.dll . . . . failed to delete
D:\WINDOWS\system32\qzjyrdyu.dllbox
D:\WINDOWS\system32\rlteldqd.dll
D:\WINDOWS\system32\smqyqcgf.dll
D:\WINDOWS\system32\spimslbw.dll
D:\WINDOWS\system32\ssqpq.dll
D:\WINDOWS\system32\tatfowtq.ini
D:\WINDOWS\system32\ubsymuli.ini
D:\WINDOWS\system32\ufzsraqb.dll
D:\WINDOWS\system32\ufzsraqb.dllbox
D:\WINDOWS\system32\vdubpogb.dll
D:\WINDOWS\system32\vnlpmxpx.dll
D:\WINDOWS\system32\vnlpmxpx.dllbox
D:\WINDOWS\system32\vxcdfcsf.dllbox
D:\WINDOWS\system32\wgbqrqkp.dll
D:\WINDOWS\system32\wgbqrqkp.dllbox
D:\WINDOWS\system32\windows
D:\WINDOWS\system32\wjfujhan.dll
D:\WINDOWS\system32\xcilyqhh.dll
D:\WINDOWS\toprates.dll

.
((((((((((((((((((((((((( Files Created from 2008-01-16 to 2008-02-16 )))))))))))))))))))))))))))))))
.

2008-02-09 19:41 . 2008-02-09 20:53 <DIR> d----c--- D:\VundoFix Backups
2008-02-07 10:56 . 2007-10-04 17:10 79,688 --a--c--- D:\WINDOWS\system32\drivers\iksyssec.sys
2008-02-07 10:56 . 2007-10-04 17:10 62,280 --a--c--- D:\WINDOWS\system32\drivers\iksysflt.sys
2008-02-07 10:56 . 2007-10-04 17:10 41,288 --a--c--- D:\WINDOWS\system32\drivers\ikfilesec.sys
2008-02-07 10:56 . 2007-10-04 17:11 29,000 --a--c--- D:\WINDOWS\system32\drivers\kcom.sys
2008-02-07 10:54 . 2005-09-23 07:29 626,688 --a--c--- D:\WINDOWS\system32\msvcr80.dll
2008-02-05 01:59 . 2008-02-05 01:59 <DIR> d----c--- D:\Documents and Settings\Manuel\Application Data\PC Tools
2008-02-04 22:19 . 2001-08-23 00:00 375,808 --a--c--- D:\kmd.exe
2008-02-03 12:21 . 2008-02-03 13:14 <DIR> d----c--- D:\Documents and Settings\Manuel\.housecall6.6
2008-02-03 12:05 . 2008-02-03 12:05 <DIR> dr---c--- D:\Documents and Settings\All Users\Application Data\SalesMon
2008-02-03 05:08 . 2008-02-03 05:08 <DIR> d----c--- D:\Documents and Settings\Manuel\Application Data\Media program view
2008-02-01 22:02 . 2008-02-01 22:02 25,992 --a--c--- D:\WINDOWS\system32\pgdfgsvc.exe
2008-02-01 14:24 . 2008-02-01 14:24 <DIR> d----c--- D:\Program Files\Hide Folders XP 2
2008-02-01 14:24 . 2007-01-23 00:26 17,264 --a--c--- D:\WINDOWS\system32\drivers\hfxp2.sys
2008-01-23 01:00 . 2008-01-23 01:00 <DIR> d----c--- D:\Documents and Settings\Manuel\Application Data\WeatherDPA
2008-01-23 01:00 . 2004-09-13 01:25 <DIR> d----c--- D:\Documents and Settings\All Users\Application Data\ZangoSA
2008-01-23 01:00 . 2008-01-23 01:00 <DIR> d----c--- D:\Documents and Settings\All Users\Application Data\2ACA5CC3-0F83-453D-A079-1076FE1A8B65
2008-01-22 04:11 . 2008-01-22 04:15 <DIR> d----c--- D:\Program Files\Xfire
2008-01-22 04:11 . 2008-01-22 04:15 <DIR> d----c--- D:\Documents and Settings\Manuel\Application Data\Xfire
2008-01-21 04:32 . 2008-01-21 04:32 97,280 --a--c--- D:\WINDOWS\system32\xl_x263dec.dll
2008-01-16 18:38 . 2008-01-16 18:38 54,608 --a--c--- D:\WINDOWS\system32\xfcodec.dll
2008-01-16 15:18 . 2008-01-16 15:18 <DIR> d----c--- D:\Program Files\Media program view

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))) ))
.
2080-08-18 14:25 --------- dc----w D:\Documents and Settings\Eduardo\Application Data\Winamp
2008-02-10 01:07 --------- dc--a-w D:\Documents and Settings\All Users\Application Data\TEMP
2008-02-03 17:11 --------- dc----w D:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-01-27 13:52 --------- dc----w D:\Program Files\Messenger Plus! Live
2008-01-21 18:31 --------- dc----w D:\Documents and Settings\Manuel\Application Data\DivX
2008-01-16 19:18 --------- dc----w D:\Documents and Settings\All Users\Application Data\Bags Plus Online Chin
2008-01-12 01:01 0 -c-ha-w D:\WINDOWS\system32\drivers\MsftWdf_Kernel_01005_C oinstaller_Critical.Wdf
2008-01-12 01:01 0 -c-ha-w D:\WINDOWS\system32\drivers\Msft_Kernel_motmodem_0 1005.Wdf
2008-01-04 09:14 --------- dc----w D:\Program Files\IrfanView
2007-12-28 05:48 --------- dc----w D:\Documents and Settings\Manuel\Application Data\TeamViewer
2007-12-26 03:14 --------- dc----w D:\Program Files\FastAero 0751f
2007-12-20 09:57 --------- dc----w D:\Program Files\MP3 Player Utilities 4.18
2007-12-17 05:57 --------- dc----w D:\Program Files\MSN Messenger
2007-12-17 05:51 --------- dc----w D:\Program Files\Windows Live
2007-12-17 05:11 --------- dc----w D:\Program Files\Circle Developement
2007-12-01 11:04 16,882 -c--a-w D:\WINDOWS\start_text.exe
2007-07-16 14:32 272 -c--a-w D:\Documents and Settings\Eduardo\Application Data\config.dat
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A95B2816-1D7E-4561-A202-68C0DE02353A}]
2004-09-13 00:04 165952 -----c--- D:\WINDOWS\system32\lmniqxnt.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"swg"="D:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\G oogleToolbarNotifier.exe" [2007-02-18 00:09 171448]
"SpybotSD TeaTimer"="D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2005-05-31 01:04 1415824]
"ctfmon.exe"="D:\WINDOWS\System32\ctfmon.exe" [2001-08-23 00:00 13312]
"SUPERAntiSpyware"="D:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2007-06-21 14:06 1318912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"IMJPMIG8.1"="D:\WINDOWS\IME\imjp8_1\IMJPMIG.exe" [2001-08-23 08:00 208949]
"PHIME2002ASync"="D:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.exe" [2001-08-23 00:00 737360]
"PHIME2002A"="D:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.exe" [2001-08-23 00:00 737360]
"DAEMON Tools-1033"="D:\Program Files\D-Tools\daemon.exe" [2004-08-22 13:05 81920]
"IMEKRMIG6.1"="D:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE" [2001-08-23 08:00 44032]
"MSPY2002"="D:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe" [2001-08-23 00:00 77824]
"Cmaudio"="cmicnfg.cpl" []
"IgfxTray"="D:\WINDOWS\System32\igfxtray.exe" [2003-04-06 12:19 155648]
"HotKeysCmds"="D:\WINDOWS\System32\hkcmd.exe" [2003-04-06 12:07 114688]
"PCTVOICE"="pctspk.exe" [2003-07-17 15:01 180224 D:\WINDOWS\system32\pctspk.exe]
"SunJavaUpdateSched"="D:\Program Files\Java\jre1.5.0_11\bin\jusched.exe" [2006-12-15 03:23 75520]
"ISUSPM Startup"="D:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-08-09 05:03 221184]
"ISUSScheduler"="D:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2004-08-09 05:03 81920]
"QuickTime Task"="D:\Program Files\QuickTime\qttask.exe" [2007-02-16 10:54 282624]
"Omnipage"="D:\Program Files\ScanSoft\OmniPageSE\opware32.exe" [2002-06-03 11:38 49152]
"avgnt"="D:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" [2007-04-02 10:35 327720]
"TkBellExe"="D:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2007-04-30 01:17 185784]
"combofix"="D:\WINDOWS\system32\kmd.exe" [2001-08-23 00:00 375808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\RunOnce]
"combofix"="D:\WINDOWS\system32\kmd.exe" [2001-08-23 00:00 375808]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cur rentVersion\Run]
"CTFMON.EXE"="D:\WINDOWS\System32\CTFMON.EXE" [2001-08-23 00:00 13312]
"MySpaceIM"="D:\Program Files\MySpace\IM\MySpaceIM.exe" [2007-05-29 21:34 5419008]

[hkey_local_machine\software\microsoft\windows\curr entversion\explorer\shellexecutehooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= D:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2006-12-20 13:55 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
D:\Program Files\SUPERAntiSpyware\SASWINLO.dll 2007-04-19 13:41 294912 D:\Program Files\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\bjeflfpx]
bjeflfpx.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\lmniqxnt]
lmniqxnt.dll 2004-09-13 00:04 165952 D:\WINDOWS\system32\lmniqxnt.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\qzjyrdyu]
qzjyrdyu.dll

R0 avgntmgr;avgntmgr;D:\WINDOWS\System32\DRIVERS\avgn tmgr.sys [2006-11-22 14:30]
R0 HFXP2;HFXP2;D:\WINDOWS\System32\DRIVERS\HFXP2.SYS [2007-01-23 00:26]
R1 avgntdd;avgntdd;D:\WINDOWS\System32\DRIVERS\avgntd d.sys [2007-02-27 15:18]
S3 BTNetFilter;Bluetooth Network Filter;D:\WINDOWS\system32\drivers\BTNetFilter.sys [2004-12-16 16:32]
S3 DCamUSBConexant;Ezonics Ezcam II;D:\WINDOWS\System32\DRIVERS\Usbcone.sys [2000-07-14 14:32]
S3 HPx9G+;HPx9G+ Device USB Driver;D:\WINDOWS\System32\Drivers\HPx9G+.sys [2003-08-04 06:27]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc

.
Contents of the 'Scheduled Tasks' folder
"2004-09-13 08:00:06 D:\WINDOWS\Tasks\A644E3B3918B9C23.job"
- d:\docume~1\manuel\applic~1\mediap~2\Gpl Meet Four.exe
"2008-02-14 04:00:00 D:\WINDOWS\Tasks\Comprobar actualizaciones de Windows Live Toolbar.job"
- D:\Program Files\Windows Live Toolbar\MSNTBUP.EXE
"2007-09-21 21:15:01 D:\WINDOWS\Tasks\Mantenimiento con 1 clic.job"
- D:\Program Files\TuneUp Utilities 2007\SystemOptimizer.exe
"2007-08-27 09:51:30 D:\WINDOWS\Tasks\Norton Security Scan.job"
- D:\Program Files\Norton Security Scan\Nss.exe
.
************************************************** ************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-02-16 09:18:07
Windows 5.1.2600 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

************************************************** ************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

PROCESS: D:\WINDOWS\system32\winlogon.exe
-> D:\WINDOWS\system32\lmniqxnt.dll

PROCESS: D:\WINDOWS\explorer.exe [6.00.2600.0000]
-> D:\WINDOWS\system32\lmniqxnt.dll
.
Completion time: 2008-02-16 9:23:21 - machine was rebooted [Manuel]
ComboFix-quarantined-files.txt 2008-02-16 13:23:08

(La primera fecha dice 2004 porque mi computadora pierde la hora y fecha cada vez que la apago y todavía no la había cambiado :P)